Gazelle/classes/calendar.class.php

<?php
class Calendar
{
    public static $Categories = array(1 => "IRC Meeting", "IRC Brainstorm", "Poll Deadline", "Feature Release", "Blog Post", "Announcement", "Featured Album", "Product Release", "Staff Picks", "Forum Brainstorm", "Forum Discussion", "Promotion", "Absence", "Task");
    public static $Importances = array(1 => "Critical", "Important", "Average", "Meh");
    public static $Colors = array(
                  "Critical" => "red",
                  "Important" => "yellow",
                  "Average" => "green",
                  "Meh" => "blue");

    public static $Teams = array(
                  0 => "Everyone",
                  1 => "Staff"

                  );

    public static function can_view()
    {
        return check_perms('users_mod');
    }

    private static function get_teams_query()
    {
        $Teams = array(0);
        $IsMod = check_perms("users_mod");
        if ($IsMod) {
            $Teams[] = 1;
        }

        return "Team IN (" . implode(",", $Teams) . ") ";
    }

    public static function get_events($Month, $Year)
    {
        if (empty($Month) || empty($Year)) {
            $Date = getdate();
            $Month = $Date['mon'];
            $Year = $Date['year'];
        }
        $Month = (int)$Month;
        $Year = (int)$Year;

        $TeamsSQL = self::get_teams_query();

        $QueryID = G::$DB->get_query_id();
        G::$DB->query("
            SELECT
              ID, Team, Title, Category, Importance, DAY(StartDate) AS StartDay, DAY(EndDate) AS EndDay
            FROM calendar
            WHERE
              MONTH(StartDate) = '$Month'
            AND
              YEAR(StartDate) = '$Year'
            AND
              $TeamsSQL");
        $Events = G::$DB->to_array();
        G::$DB->set_query_id($QueryID);
        return $Events;
    }

    public static function get_event($ID)
    {
        $ID = (int)$ID;
        if (empty($ID)) {
            error("Invalid ID");
        }
        $TeamsSQL = self::get_teams_query();
        $QueryID = G::$DB->get_query_id();
        G::$DB->query("
            SELECT
              ID, Team, Title, Body, Category, Importance, AddedBy, StartDate, EndDate
            FROM calendar
            WHERE
              ID = '$ID'
            AND
              $TeamsSQL");
        $Event = G::$DB->next_record(MYSQLI_ASSOC);
        G::$DB->set_query_id($QueryID);
        return $Event;
    }

    public static function create_event($Title, $Body, $Category, $Importance, $Team, $UserID, $StartDate, $EndDate = null)
    {
        if (empty($Title) || empty($Body) || !is_number($Category) || !is_number($Importance)  || !is_number($Team) || empty($StartDate)) {
            error("Error adding event");
        }
        $Title = db_string($Title);
        $Body = db_string($Body);
        $Category = (int)$Category;
        $Importance = (int)$Importance;
        $UserID = (int)$UserID;
        $Team = (int)$Team;
        $StartDate = db_string($StartDate);
        $EndDate = db_string($EndDate);

        $QueryID = G::$DB->get_query_id();
        G::$DB->query("
            INSERT INTO calendar
              (Title, Body, Category, Importance, Team, StartDate, EndDate, AddedBy)
            VALUES
              ('$Title', '$Body', '$Category', '$Importance', '$Team', '$StartDate', '$EndDate', '$UserID')");
        G::$DB->set_query_id($QueryID);
        send_irc("PRIVMSG " . ADMIN_CHAN . " :!mod New calendar event created! Event: $Title; Starts: $StartDate; Ends: $EndDate.");
    }

    public static function update_event($ID, $Title, $Body, $Category, $Importance, $Team, $StartDate, $EndDate = null)
    {
        if (!is_number($ID) || empty($Title) || empty($Body) || !is_number($Category) || !is_number($Importance) || !is_number($Team) || empty($StartDate)) {
            error("Error updating event");
        }
        $ID = (int)$ID;
        $Title = db_string($Title);
        $Body = db_string($Body);
        $Category = (int)$Category;
        $Importance = (int)$Importance;
        $Team = (int)$Team;
        $StartDate = db_string($StartDate);
        $EndDate = db_string($EndDate);
        $QueryID = G::$DB->get_query_id();
        G::$DB->query("
            UPDATE calendar
            SET
              Title = '$Title',
              Body = '$Body',
              Category = '$Category',
              Importance = '$Importance',
              Team = '$Team',
              StartDate = '$StartDate',
              EndDate = '$EndDate'
            WHERE
              ID = '$ID'");
        G::$DB->set_query_id($QueryID);
    }

    public static function remove_event($ID)
    {
        $ID = (int)$ID;
        if (!empty($ID)) {
            $QueryID = G::$DB->get_query_id();
            G::$DB->query("DELETE FROM calendar WHERE ID = '$ID'");
            G::$DB->set_query_id($QueryID);
        }
    }
}